Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
File: QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json)
Hash identifier: OjtnK1+vo4iHUAkaz/O9fU4i3waTYdOGPWLPEcET+7c=
Subject key identifier: A6:E7:F1:85:97:D5:D5:14:A1:AE:59:AD:30:3E:84:89:3F:3D:EA:9C
Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Certificate serial: 0C4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
Manifest number: 0C27
Signing time: Fri 28 Mar 2025 18:52:51 +0000
Manifest this update: Fri 28 Mar 2025 18:52:50 +0000
Manifest next update: Fri 04 Apr 2025 18:52:50 +0000
Files and hashes: 1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: xJCv43WLuLK7ypxHpEEs04XwLZ818lFTAJfkBXkyT5I=)
2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: WhFdwVA+Rqc9T4Pe4wg3jXjmM2B3Qv4g2BycMdAzMjs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3149 (0xc4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DB4E
Validity
Not Before: Mar 28 18:52:50 2025 GMT
Not After : Apr 4 18:52:50 2025 GMT
Subject: CN=67e6f003-1010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:85:47:a5:be:86:26:bb:64:39:0f:99:31:
1d:13:2b:44:f5:7f:6e:ad:a9:55:a5:45:cd:75:f3:
1c:85:44:2a:b5:d7:35:12:80:56:2c:1b:6a:64:32:
18:42:f8:f1:e3:c5:b1:ca:29:55:20:0c:47:06:ae:
bc:2c:26:58:6e:a7:db:d6:73:25:e5:fa:46:b5:83:
be:0a:21:65:e0:d4:6e:8d:e2:72:0b:1b:c5:99:75:
f6:4e:ad:4e:cf:12:87:28:f3:42:9e:8d:7b:83:a9:
60:92:06:4b:59:de:0e:7b:85:5f:97:e0:7e:fc:05:
64:19:df:9f:2a:3a:89:ae:a8:f7:bc:40:ab:a5:fe:
ee:d4:35:68:6f:47:f8:7d:3c:c7:25:7b:c6:4a:fe:
e2:29:3f:2c:c2:8e:e3:c6:74:55:e3:ba:de:24:ef:
31:10:7f:24:e9:74:5c:7a:21:3e:62:eb:1f:dd:da:
d9:6e:32:24:e3:05:bb:44:63:d1:2c:48:41:e7:a8:
b9:05:d1:b8:e5:3f:91:cf:41:2d:e5:fc:82:67:56:
bc:63:30:e0:cf:5c:5d:51:9e:4b:af:0f:0b:d0:34:
4c:5a:4b:f9:63:24:fa:5b:cd:eb:f4:67:96:e9:cb:
39:a4:a0:8a:45:6d:b2:7d:b6:99:27:8e:2d:87:b8:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E7:F1:85:97:D5:D5:14:A1:AE:59:AD:30:3E:84:89:3F:3D:EA:9C
X509v3 Authority Key Identifier:
keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ea:9e:68:93:2d:05:8a:26:79:d9:3c:9e:ae:92:7e:55:82:
3e:f4:94:1e:b0:54:ed:76:e7:9d:df:7f:e4:f2:f7:2a:c2:71:
44:3c:0f:c0:36:93:40:42:32:0d:77:be:8e:d8:dc:44:1e:f6:
c1:8d:53:41:76:0d:7b:cf:9f:31:08:4b:6d:0b:98:97:b4:b6:
de:2a:38:04:8e:b9:5b:50:c0:d8:36:f8:bb:59:e2:7f:44:ca:
2b:37:79:c6:6e:d2:af:c2:98:76:3b:79:1c:d1:cb:1e:61:db:
ee:85:26:92:ae:cc:0b:85:d6:f0:27:d0:89:61:40:94:d0:b2:
6a:9d:96:07:f8:1c:2d:a7:53:e4:66:92:78:40:db:0f:88:54:
f6:ac:12:b4:c5:88:ec:49:6f:05:ea:fa:d2:2e:32:b6:b9:27:
1c:e6:4a:4b:05:a0:4b:07:22:48:9d:2b:e5:a0:f9:01:56:05:
72:75:ee:42:48:ec:83:55:08:4e:44:13:c9:52:2c:9a:91:1f:
ed:81:ae:93:8b:42:09:20:f7:ff:16:d9:08:8a:37:71:11:c6:
bc:8d:e3:44:09:58:03:19:f0:0b:fa:78:d1:5d:4e:5a:bd:1c:
08:78:59:8a:b9:82:e9:8a:5c:4d:63:89:bc:b5:de:7d:21:54:
65:85:3d:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OERCNEUxMTAvBgNVBAUTKDQyNzU4REUwQ0MwQ0Y2MkMyQUVFRTkzRTBFRUU2Nzkw
M0E1MDJDQ0MwHhcNMjUwMzI4MTg1MjUwWhcNMjUwNDA0MTg1MjUwWjAYMRYwFAYD
VQQDEw02N2U2ZjAwMy0xMDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuXGFR6W+hia7ZDkPmTEdEytE9X9uralVpUXNdfMchUQqtdc1EoBWLBtqZDIY
Qvjx48WxyilVIAxHBq68LCZYbqfb1nMl5fpGtYO+CiFl4NRujeJyCxvFmXX2Tq1O
zxKHKPNCno17g6lgkgZLWd4Oe4Vfl+B+/AVkGd+fKjqJrqj3vECrpf7u1DVob0f4
fTzHJXvGSv7iKT8swo7jxnRV47reJO8xEH8k6XRceiE+Yusf3drZbjIk4wW7RGPR
LEhB56i5BdG45T+Rz0Et5fyCZ1a8YzDgz1xdUZ5Lrw8L0DRMWkv5YyT6W83r9GeW
6cs5pKCKRW2yfbaZJ44th7jB2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbn8YWX
1dUUoa5ZrTA+hIk/PeqcMB8GA1UdIwQYMBaAFEJ1jeDMDPYsKu7pPg7uZ5A6UCzM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI0RS83N0U3RjlBMDBD
RTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlpd3E3dWstRHU1bmtEcFFM
TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FuV040TXdNOWl3cTd1ay1EdTVua0RwUUxNdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
REI0RS83N0U3RjlBMDBDRTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlp
d3E3dWstRHU1bmtEcFFMTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBr6p5oky0FiiZ52TyerpJ+VYI+9JQesFTtdued33/k8vcqwnFEPA/A
NpNAQjINd76O2NxEHvbBjVNBdg17z58xCEttC5iXtLbeKjgEjrlbUMDYNvi7WeJ/
RMorN3nGbtKvwph2O3kc0cseYdvuhSaSrswLhdbwJ9CJYUCU0LJqnZYH+Bwtp1Pk
ZpJ4QNsPiFT2rBK0xYjsSW8F6vrSLjK2uScc5kpLBaBLByJInSvloPkBVgVyde5C
SOyDVQhORBPJUiyakR/tga6Ti0IJIPf/FtkIijdxEca8jeNECVgDGfAL+njRXU5a
vRwIeFmKuYLpilxNY4m8td59IVRlhT0/
-----END CERTIFICATE-----
Generated at Thu Apr 10 18:36:17 2025 by rpki-client